Unlock instant, AI-driven research and patent intelligence for your innovation.

Method and device for data feature extraction

A technology of data features and feature strings, applied in the field of communication, can solve problems such as the inability to effectively extract private protocol and encrypted traffic data features, and achieve the effects of liberating manpower, improving efficiency, and improving effectiveness

Active Publication Date: 2018-10-02
NSFOCUS INFORMATION TECHNOLOGY CO LTD +1
View PDF6 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] Embodiments of the present invention provide a method and device for extracting data features to solve the problem in the prior art that data features in private protocols and encrypted traffic cannot be effectively extracted

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and device for data feature extraction
  • Method and device for data feature extraction
  • Method and device for data feature extraction

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0070] The following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

[0071] In order to effectively extract the data features in the private protocol and encrypted traffic, in the embodiment of the present invention, the multi-pattern matching algorithm is applied to the data feature extraction, specifying the session that needs data feature extraction, and according to the extracted set number of messages The application layer loads the byte order, builds a state machine and performs matching to obtain data feat...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention relates to the technical field of communication, and particularly relates to a method and a device for extracting data features. The method comprises the following steps: respectively extracting a set amount of message information from a determined first session and a determined second session, wherein the first session and the second session are generated by the same application operation at different times, and the message information at least comprises a load byte sequence of a message application layer; and establishing a corresponding state machine according to the load byte sequence of the message application layer extracted from the first session and a specified multi-mode matching algorithm, and matching according to the load byte sequence of the message application layer extracted from the second session to obtain the data features of the application operation. The problem that the application features of private protocols and encryption flow are difficult to extract is solved, the efficiency is improved, manpower is liberated, a strong feature set is obtained by iterative merging of feature strings, and the effectiveness of the extracted feature strings is improved.

Description

technical field [0001] The present invention relates to the field of communication technology, in particular to a method and device for extracting data features. Background technique [0002] With the rapid development of Internet technology, new applications and services are constantly emerging, and application layer protocols emerge in endlessly. While this brings great convenience to people, its safety problem is also becoming more and more serious. Various new applications and unknown protocols make the network more and more complex and difficult to manage. Accurate identification of application layer protocols and management of designated traffic based on the identification results are currently the main way to solve the above problems, and are also the core of the new generation firewall. Currently, the most widely used technology for identification of application layer protocols is Deep Packet Inspection (DPI), which is also the most effective technology, because DP...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/08H04L12/26
CPCH04L43/028H04L67/14H04L67/143H04L69/329
Inventor 徐牧池
Owner NSFOCUS INFORMATION TECHNOLOGY CO LTD